GitHub - devrelopers/shell-mcp: MCP server for scoped shell access. Read commands work out of the box; writes require an explicit per-directory TOML allowlist that walks up like git. Tuned for Claude Desktop architecture sessions. · GitHub